Path: blob/main/sys/netpfil/ipfw/nptv6/ip_fw_nptv6.c
39536 views
/*-1* Copyright (c) 2016 Yandex LLC2* Copyright (c) 2016 Andrey V. Elsukov <[email protected]>3* All rights reserved.4*5* Redistribution and use in source and binary forms, with or without6* modification, are permitted provided that the following conditions7* are met:8*9* 1. Redistributions of source code must retain the above copyright10* notice, this list of conditions and the following disclaimer.11* 2. Redistributions in binary form must reproduce the above copyright12* notice, this list of conditions and the following disclaimer in the13* documentation and/or other materials provided with the distribution.14*15* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR16* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES17* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.18* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,19* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT20* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,21* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY22* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT23* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF24* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.25*/2627#include <sys/param.h>28#include <sys/systm.h>29#include <sys/kernel.h>30#include <sys/lock.h>31#include <sys/malloc.h>32#include <sys/module.h>33#include <sys/rwlock.h>34#include <sys/socket.h>3536#include <net/if.h>37#include <net/vnet.h>3839#include <netinet/in.h>40#include <netinet/ip_var.h>41#include <netinet/ip_fw.h>4243#include <netpfil/ipfw/ip_fw_private.h>44#include <netpfil/ipfw/nptv6/nptv6.h>4546static int47vnet_ipfw_nptv6_init(const void *arg __unused)48{4950return (nptv6_init(&V_layer3_chain, IS_DEFAULT_VNET(curvnet)));51}5253static int54vnet_ipfw_nptv6_uninit(const void *arg __unused)55{5657nptv6_uninit(&V_layer3_chain, IS_DEFAULT_VNET(curvnet));58return (0);59}6061static int62ipfw_nptv6_modevent(module_t mod, int type, void *unused)63{6465switch (type) {66case MOD_LOAD:67case MOD_UNLOAD:68break;69default:70return (EOPNOTSUPP);71}72return (0);73}7475static moduledata_t ipfw_nptv6_mod = {76"ipfw_nptv6",77ipfw_nptv6_modevent,78079};8081/* Define startup order. */82#define IPFW_NPTV6_SI_SUB_FIREWALL SI_SUB_PROTO_IFATTACHDOMAIN83#define IPFW_NPTV6_MODEVENT_ORDER (SI_ORDER_ANY - 128) /* after ipfw */84#define IPFW_NPTV6_MODULE_ORDER (IPFW_NPTV6_MODEVENT_ORDER + 1)85#define IPFW_NPTV6_VNET_ORDER (IPFW_NPTV6_MODEVENT_ORDER + 2)8687DECLARE_MODULE(ipfw_nptv6, ipfw_nptv6_mod, IPFW_NPTV6_SI_SUB_FIREWALL,88IPFW_NPTV6_MODULE_ORDER);89MODULE_DEPEND(ipfw_nptv6, ipfw, 3, 3, 3);90MODULE_VERSION(ipfw_nptv6, 1);9192VNET_SYSINIT(vnet_ipfw_nptv6_init, IPFW_NPTV6_SI_SUB_FIREWALL,93IPFW_NPTV6_VNET_ORDER, vnet_ipfw_nptv6_init, NULL);94VNET_SYSUNINIT(vnet_ipfw_nptv6_uninit, IPFW_NPTV6_SI_SUB_FIREWALL,95IPFW_NPTV6_VNET_ORDER, vnet_ipfw_nptv6_uninit, NULL);969798